
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: lEI7rXlwByKSNXeL4NpiToBKYFwwA9p2npxcUlbDOto=
Subject key identifier: B1:1C:36:EC:94:0A:35:3B:55:52:D3:E0:4A:66:9F:86:F4:4B:BE:A9
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 019873E3410CB4AED629127288B0E4F3F687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:02:09 +0000
Manifest this update: Mon 04 Aug 2025 07:02:09 +0000
Manifest next update: Tue 05 Aug 2025 07:02:09 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: xhy7ozKmbRRhYMGrLVqFqptasJsCt9A8aOnYh48ZGI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:41:0c:b4:ae:d6:29:12:72:88:b0:e4:f3:f6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Aug 4 07:02:09 2025 GMT
Not After : Aug 5 07:02:09 2025 GMT
Subject: CN=b11c36ec940a353b5552d3e04a669f86f44bbea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:49:8c:00:1c:10:69:fe:d0:5c:18:70:4c:
b3:66:24:2e:25:fa:fb:9f:f1:b1:87:82:cf:f3:d8:
1b:79:cf:8a:ce:78:5e:9f:31:a3:3e:45:e4:96:e6:
6e:0a:12:db:92:64:3a:c2:c0:d3:23:c2:1d:2e:eb:
89:39:80:b3:84:b4:68:3a:45:ce:92:87:55:ba:9f:
4f:33:c1:cf:87:4c:1d:55:ac:41:33:e4:5e:cd:83:
cc:5d:4d:c4:04:b0:b1:ee:93:50:41:04:04:2b:59:
4e:20:8b:c5:29:55:ec:d4:92:9a:fc:87:dc:aa:ba:
7c:af:42:a2:d4:c5:1e:8b:41:55:24:ca:e9:8d:b3:
97:70:72:4e:21:46:28:e5:67:2f:f1:ce:b1:9c:3c:
ab:5d:b5:89:0a:0e:55:ae:80:cb:95:85:a3:06:02:
fe:51:71:ae:d4:4d:93:a5:33:5c:f7:25:08:c3:18:
36:01:dd:40:5c:e4:a9:3b:16:41:10:24:46:4b:74:
99:f7:d4:9b:3d:3f:d9:2b:aa:77:7d:93:49:98:bf:
27:08:40:61:85:5f:0a:e7:75:7e:eb:db:e1:1a:36:
3a:fb:62:f7:e5:2d:dd:e2:4d:e2:10:74:ea:fb:06:
a8:4e:0f:50:a6:08:7a:df:60:b8:b7:fb:97:8c:fb:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:36:EC:94:0A:35:3B:55:52:D3:E0:4A:66:9F:86:F4:4B:BE:A9
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4e:a6:05:96:6c:18:5e:12:eb:aa:de:df:d2:23:75:e7:4e:
d4:16:cc:ec:2f:46:ae:42:6b:e7:46:fb:3a:54:b6:c7:c0:c7:
23:6f:39:47:5a:30:c5:dc:84:e7:81:e2:8c:05:0d:df:17:2a:
19:8d:fe:68:1e:74:ec:06:28:5a:f8:40:d2:50:f8:65:a2:8e:
35:ce:d2:6b:32:db:89:36:c5:0e:c1:e5:72:1b:ea:30:70:3b:
ac:de:a2:7a:ec:1a:fe:33:f9:16:5e:71:80:84:68:7a:4d:62:
8d:a3:c5:ae:28:b1:29:fd:72:49:c8:17:2e:cd:81:75:6e:c6:
3b:de:d7:b4:8e:68:40:bf:bd:1b:06:61:40:07:4d:c8:bc:ec:
81:19:44:4a:a7:3f:d8:2b:94:96:c8:fb:3c:6c:d5:10:ae:3f:
a3:9a:9b:3c:9a:8b:f6:94:1b:5c:c8:a3:c5:59:04:6d:99:a4:
2b:20:de:7a:73:a3:87:16:22:76:95:e5:63:c2:89:49:8c:96:
51:e3:f0:4f:f5:96:0c:4d:65:7b:bd:23:1b:2e:1d:f2:89:59:
85:d9:5e:35:44:b9:ff:3e:4b:98:12:6d:c6:6d:e2:da:48:44:
46:ce:d4:6a:1c:39:61:13:0d:91:9c:3a:14:3a:74:3b:c3:b3:
4b:ad:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:36 2025 by rpki-client